Lucene search
PRIOn knowledge basePRION:CVE-2022-36102HistorySep 12, 2022 - 8:15 p.m.
Design/Logic Flaw
2022-09-1220:15:00
PRIOn knowledge base
www.prio-n.com
shopware
e-commerce
acl bypass
0.004 Low
EPSS
Percentile
72.5%
Shopware is an open source e-commerce software. In affected versions if backend admin controllers are called with a certain notation, the ACL could be bypassed. Users could execute actions, which they are normally not able to do. Users are advised to update to the current version (5.7.15). Users can get the update via the Auto-Updater or directly via the download overview. There are no known workarounds for this issue.
Related
veracode
veracode
Authorization Bypass
2022-09-13 03:56:36
cvelist
cvelist
CVE-2022-36102 Acess control list bypassed via crafted specific URLs
2022-09-12 20:00:24
osv
osv
Shopware access control list bypassed via crafted specific URLs
2022-09-16 21:01:29
github
github
Shopware access control list bypassed via crafted specific URLs
2022-09-16 21:01:29
cve
cve
CVE-2022-36102
2022-09-12 20:15:12
nvd
nvd
CVE-2022-36102
2022-09-12 20:15:12